Subprocessors

This page lists the companies that process personal data on behalf of 1time studios, LLC to deliver Check1 (the "Service"). They are the Approved Subprocessors referred to in our Data Processing Agreement and the service providers named in our Privacy Policy. Each one is bound by a written contract to process data only on our instructions and to protect it at least as well as we do.

How we tell you about changes

We update this page before adding or replacing a subprocessor, at least 10 business days before the new provider begins processing Customer Content. If a change is needed urgently to keep the Service secure or available, we post it as soon as we can. To receive an email when this page changes, write to notices@1timestudios.com with the subject "Subprocessor notices". Your right to object to a new subprocessor, and the timeline for doing so, are set out in the Data Processing Agreement.

Subprocessors for the Check1 service

Google LLC

Services
Google Cloud Platform (Cloud Run, Cloud SQL, Cloud Storage, Cloud Tasks, Cloud Logging and Monitoring, Cloud Vision) and Firebase (Authentication, Cloud Messaging)
Purpose
Hosting the Service, its database and file storage; running background jobs; keeping server logs; reading text from scanned photos and receipts; signing you in; delivering push notifications
Data processed
All Customer Content stored in the Service, including photos, receipts and generated documents. Cloud Vision receives scan and receipt images. Firebase Authentication receives your email address and sign-in credentials. Cloud Messaging receives device tokens and notification content.
Location
United States (Google Cloud region us-central1, Iowa)
Terms
Google Cloud Data Processing Addendum · Firebase Data Processing and Security Terms

Anthropic, PBC

Services
Claude API
Purpose
Proposing an identification for gear or a receipt when our own catalog matching is not confident
Data processed
The scan photo, the text read from it, and the catalog candidates we are choosing between. We do not send your name, email address or account identifier. Under Anthropic's commercial terms, inputs and outputs are not used to train Anthropic's models.
Location
United States
Terms
Anthropic Commercial Terms of Service · Privacy Policy

RevenueCat, Inc.

Services
RevenueCat subscription platform
Purpose
Managing subscriptions purchased through the Apple App Store and Google Play, and telling the Service whether an account is on a trial, paid, or read-only
Data processed
Your account identifier, subscription status and plan, renewal dates, store, and store transaction identifiers. RevenueCat does not receive your payment card details.
Location
United States
Terms
RevenueCat Data Processing Addendum · Privacy Policy

Functional Software, Inc. (Sentry)

Services
Sentry error monitoring
Purpose
Reporting crashes and errors in the app and on our servers so we can fix them
Data processed
Device model, operating system version, app version, and the technical details of the error. Our servers redact known personal fields before an event is sent, and the app drops ordinary network failures.
Location
United States (Sentry US data region)
Terms
Sentry Data Processing Addendum

Twilio Inc. (SendGrid)

Services
SendGrid email delivery and Inbound Parse
Purpose
Sending service emails (account, security and trial messages, receipt-processing results) and receiving purchase receipts you forward to the Check1 intake address
Data processed
Your email address and the content of messages we send you. Forwarded receipt emails, including the sender address, subject, body, and attachments.
Location
United States
Terms
Twilio Data Protection Addendum

IPinfo Inc.

Services
ipinfo.io IP geolocation API
Purpose
Converting an IP address to a coarse city or metro area when you record a loan, so the record shows roughly where the handoff happened
Data processed
IP address only
Location
United States
Terms
IPinfo Privacy Policy

Who is not on this list

Apple and Google (app stores) bill your subscription under their own terms and privacy policies. They act for themselves, not on our instructions, so they are not subprocessors.

Insurers, police, and anyone else you send a document to receive it from you, not from us. Check1 generates documents; you decide who gets them.

Our own staff may access data to provide support, investigate a problem, or review the catalog queue. They are not subprocessors, and access is limited to the people who need it.

Providers used only on this website

The check1.app website uses the providers below. They handle information about visitors to this site, not Customer Content from the Service, so they are listed for completeness rather than as subprocessors under the Data Processing Agreement.

Google LLC

Services
Firebase Hosting and Google Fonts
Purpose
Serving this website and its typefaces
Data processed
The IP address and request details of each visitor, in ordinary server logs
Location
United States
Terms
Google Privacy Policy

PostHog, Inc.

Services
PostHog product analytics (US Cloud)
Purpose
Understanding which pages and forms on this site visitors use. Loaded only after you accept analytics cookies in the consent banner.
Data processed
Page views, form interactions, browser and device characteristics, and a cookie identifier
Location
United States
Terms
PostHog Data Processing Agreement · Privacy Policy

Termly

Services
Termly consent management
Purpose
Showing the cookie consent banner, blocking analytics until you accept, and recording your consent choice
Data processed
Your consent choices and a consent identifier
Location
United States
Terms
Termly Privacy Policy

Formspree, Inc.

Services
Formspree form handling
Purpose
Receiving what you submit through this site's launch-updates form and delivering it to us
Data processed
The email address and any message you submit
Location
United States
Terms
Formspree Privacy Policy

Questions

Email privacy@1timestudios.com with questions about this list, or notices@1timestudios.com for notices under the Data Processing Agreement.